CVE-2026-80155

Name of the Vulnerable Software and Affected Versions Lantronix SLC8000 versions prior to 9.7.0.5 Lantronix EMG8500 versions prior to 9.7.0.1 Lantronix EMG7500 versions prior to 9.7.0.1 Lantronix SLB882 (affected versions not specified) Lantronix SLCx-03 (affected versions not specified) Lantronix SLCx-02 (affected versions not specified)

Description An authentication bypass exists in the web management portal upload endpoint. The web configuration server uses snprintf with a fixed-size buffer to construct the session cookie file path. By providing a cookie value of a specific length, an attacker can cause the path to truncate at the required delimiter and use path traversal to redirect authentication validation to an arbitrary on-disk file, such as the local user database, bypassing session checks. This allows unauthenticated attackers to read sensitive configuration files and upload files to arbitrary filesystem locations, potentially leading to remote code execution and complete loss of confidentiality, integrity, and availability on the device and connected serial devices.

Recommendations Update SLC8000 to firmware version 9.7.0.5 or later. Update EMG8500 to firmware version 9.7.0.1 or later. Update EMG7500 to firmware version 9.7.0.1 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability for SLB882, SLCx-03, and SLCx-02.